OESA-2026-3158

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2026-3158
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2026-3158.json
JSON Data
https://api.osv.dev/v1/vulns/OESA-2026-3158
Upstream
Published
2026-07-24T03:30:28Z
Modified
2026-07-24T03:45:15.728260212Z
Summary
mtr security update
Details

It is a network diagnostic tool,it has the "ping" and "traceroute" features. It prints information about the route and packets that sent from the host to the specified destination system.This tool can also print the response times and percentage for all network hops between the systems.

Security Fix(es):

mtr is vulnerable to Out-of-bound read vulnerability in ipinfolookup() function. An attacker who can influence the TXT response used for AS lookups can trigger this bug by returning a DNS response that is larger than 512 bytes and uses a crafted compression pointer in the answer NAME field. ipinfolookup() function uses the length of the response as the end-of-message boundary for dn_expand() function. The result is a reliable crash.

This issue exists in the mtr through version 0.96 and it was fixed in commit 48e1794414d338ce47abc0f27c25ade8788af9c3.(CVE-2026-14461)

Database specific 
{
    "severity": "Medium"
}
References

Affected packages

openEuler:20.03-LTS-SP4
mtr

Package

Name
mtr
Purl
pkg:rpm/openEuler/mtr&distro=openEuler-20.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.93-6.oe2003sp4

Ecosystem specific 

{
    "x86_64": [
        "mtr-0.93-6.oe2003sp4.x86_64.rpm",
        "mtr-debuginfo-0.93-6.oe2003sp4.x86_64.rpm",
        "mtr-debugsource-0.93-6.oe2003sp4.x86_64.rpm"
    ],
    "aarch64": [
        "mtr-0.93-6.oe2003sp4.aarch64.rpm",
        "mtr-debuginfo-0.93-6.oe2003sp4.aarch64.rpm",
        "mtr-debugsource-0.93-6.oe2003sp4.aarch64.rpm"
    ],
    "noarch": [
        "mtr-help-0.93-6.oe2003sp4.noarch.rpm"
    ],
    "src": [
        "mtr-0.93-6.oe2003sp4.src.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-3158.json"
openEuler:22.03-LTS-SP4
mtr

Package

Name
mtr
Purl
pkg:rpm/openEuler/mtr&distro=openEuler-22.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.95-3.oe2203sp4

Ecosystem specific 

{
    "x86_64": [
        "mtr-0.95-3.oe2203sp4.x86_64.rpm",
        "mtr-debuginfo-0.95-3.oe2203sp4.x86_64.rpm",
        "mtr-debugsource-0.95-3.oe2203sp4.x86_64.rpm"
    ],
    "aarch64": [
        "mtr-0.95-3.oe2203sp4.aarch64.rpm",
        "mtr-debuginfo-0.95-3.oe2203sp4.aarch64.rpm",
        "mtr-debugsource-0.95-3.oe2203sp4.aarch64.rpm"
    ],
    "noarch": [
        "mtr-help-0.95-3.oe2203sp4.noarch.rpm"
    ],
    "src": [
        "mtr-0.95-3.oe2203sp4.src.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-3158.json"
openEuler:24.03-LTS-SP1
mtr

Package

Name
mtr
Purl
pkg:rpm/openEuler/mtr&distro=openEuler-24.03-LTS-SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.95-5.oe2403sp1

Ecosystem specific 

{
    "x86_64": [
        "mtr-0.95-5.oe2403sp1.x86_64.rpm",
        "mtr-debuginfo-0.95-5.oe2403sp1.x86_64.rpm",
        "mtr-debugsource-0.95-5.oe2403sp1.x86_64.rpm"
    ],
    "src": [
        "mtr-0.95-5.oe2403sp1.src.rpm"
    ],
    "noarch": [
        "mtr-help-0.95-5.oe2403sp1.noarch.rpm"
    ],
    "aarch64": [
        "mtr-0.95-5.oe2403sp1.aarch64.rpm",
        "mtr-debuginfo-0.95-5.oe2403sp1.aarch64.rpm",
        "mtr-debugsource-0.95-5.oe2403sp1.aarch64.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-3158.json"
openEuler:24.03-LTS-SP3
mtr

Package

Name
mtr
Purl
pkg:rpm/openEuler/mtr&distro=openEuler-24.03-LTS-SP3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.95-5.oe2403sp3

Ecosystem specific 

{
    "x86_64": [
        "mtr-0.95-5.oe2403sp3.x86_64.rpm",
        "mtr-debuginfo-0.95-5.oe2403sp3.x86_64.rpm",
        "mtr-debugsource-0.95-5.oe2403sp3.x86_64.rpm"
    ],
    "aarch64": [
        "mtr-0.95-5.oe2403sp3.aarch64.rpm",
        "mtr-debuginfo-0.95-5.oe2403sp3.aarch64.rpm",
        "mtr-debugsource-0.95-5.oe2403sp3.aarch64.rpm"
    ],
    "noarch": [
        "mtr-help-0.95-5.oe2403sp3.noarch.rpm"
    ],
    "src": [
        "mtr-0.95-5.oe2403sp3.src.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-3158.json"
openEuler:24.03-LTS-SP4
mtr

Package

Name
mtr
Purl
pkg:rpm/openEuler/mtr&distro=openEuler-24.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.95-5.oe2403sp4

Ecosystem specific 

{
    "x86_64": [
        "mtr-0.95-5.oe2403sp4.x86_64.rpm",
        "mtr-debuginfo-0.95-5.oe2403sp4.x86_64.rpm",
        "mtr-debugsource-0.95-5.oe2403sp4.x86_64.rpm"
    ],
    "aarch64": [
        "mtr-0.95-5.oe2403sp4.aarch64.rpm",
        "mtr-debuginfo-0.95-5.oe2403sp4.aarch64.rpm",
        "mtr-debugsource-0.95-5.oe2403sp4.aarch64.rpm"
    ],
    "noarch": [
        "mtr-help-0.95-5.oe2403sp4.noarch.rpm"
    ],
    "src": [
        "mtr-0.95-5.oe2403sp4.src.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-3158.json"